Zero Breach Zone

Welcome to Episode 17 of Zero Breach Zone, in this episode hosts Phil Hintz and Andy Lombardo are joined by Jennifer Womble, a trailblazer in the EdTech community and the visionary Program Chair of the Future of Education Technology Conference (FETC). Jennifer brings her passion for amplifying educator voices and designing meaningful professional development experiences to the table.

Together, they dive into the evolution of FETC from a regional event to a nationally recognized EdTech hub, explore the rise of cybersecurity awareness in schools, and discuss the transformative role of VR and data privacy in the future of education.

Whether you're a classroom teacher, tech leader, or EdTech partner, this conversation will leave you inspired to rethink community, security, and innovation in education.

Key Takeaways:

• Jennifer Womble highlights the power of amplifying diverse voices in education
• Jennifer's story with FETC since 1994 & how the conference has grown to serve a international audiences while staying rooted in innovation
• Why cybersecurity is no longer optional & how it's central to K–12 leadership conversations
• FETC 2026 priorities & why networking & community are as valuable as the sessions themselves
• Intentionality in conference design boosts engagement and impact - ie designing conferences for professional and human needs
• Why students must be part of the cybersecurity conversation
• The promise of VR in classrooms is already becoming a reality 
• Data privacy remains a top priority as schools adopt more tech & educating students is the next step 
• Parting Tool: Lucyd Glasses & Otis AI 

Chapters:

00:00 Introduction to EdTech and Jennifer Womble
03:01 Jennifer's Journey in Education
06:09 The Evolution of FETC
09:02 Building a National EdTech Community
11:56 Cybersecurity in Education
14:58 Creating a Collaborative Learning Environment
18:00 Intentionality in Conference Design
21:04 Engaging Students in Cybersecurity Awareness
23:31 The Importance of Cybersecurity Education
24:54 Engaging Students in Cybersecurity
26:56 Understanding Cyber Threats
28:43 Data Privacy and Student Awareness
30:07 Innovative Tools for Educators
32:42 Experiential Learning in VR
37:21 FETC Insights and Opportunities

Welcome to Episode 7 of the Zero Breach Zone ! Join hosts Phil Hintz and Andy Lombardo as they sit down with Frankie Jackson, a cybersecurity expert and former CTO of Cypress Fairbanks ISD, to explore the intersection of education and cybersecurity. From NASA to one of Texas's largest school districts, Frankie shares her journey and insights on developing comprehensive cybersecurity frameworks for educational institutions.

As a thought leader in K-12 cybersecurity, Frankie Jackson continues advocating for increased diversity in technology, co-authoring The Savvy Ed Tech Leader alongside Sheryl Abshire, Diane Doersch, and Donna Williamson – a comprehensive roadmap helping technology practitioners advance their careers and shape the future of educational technology. This episode is highly engaging and essential listening for K-12 cybersecurity pros and the like!

Key Takeaways:
• Frankie Jackson transitioned from NASA to K-12 education for a better work-life balance but found her true passion
• Her work in Cypress Fairbanks ISD, one of the largest school districts in Texas
• The Trusted Learning Environment (TLE) and the focus on data privacy in education
• Behind the scenes of he Cybersecurity Coalition and why it was formed to improve cybersecurity practices in education
• The NIST Cybersecurity Framework and how it was adapted for educational institutions
• Frankie explains why collaboration among strategic partners is crucial for effective cybersecurity solutions
• The creation of the cybersecurity rubric, which helps school districts assess their cybersecurity maturity
• Why training for cybersecurity rubric evaluators is essential for effective implementation
• Phil asks if cybersecurity insurance rates can decrease with improved cybersecurity practices
• Frankie Jackson envisions a standardized framework for cybersecurity in education
• Parting Tool: Savvy Ed Tech Leader Self Assessment

Welcome to episode 16 of the Zero Breach Zone. In this episode, hosts Phil Hintz and Andy Lombardo are joined by Dr. Adam Phyall, Director of Professional Learning and Leadership at All4Ed and a board member of ISTE. With a career that began as a high school science teacher, Dr. Phyall has served as a Chief Technology Officer and brings a wide breadth of experience in educational leadership and technology integration.

He discusses his journey from the classroom to becoming a leader in educational technology, emphasizing the importance of integrating tech in education while ensuring student safety and inclusivity. Dr. Phyall shares insights on the role of diverse voices in ed tech policy-making and the significance of collaboration among educators. He also highlights the Future Ready Schools initiative and the impact of AI in education, advocating for thoughtful governance and community engagement.

In this conversation, Phil, Andy, and Adam delve into the evolving landscape of AI in education, stressing the importance of understanding and integrating technology in schools rather than simply banning or blindly embracing new trends. They explore the challenges posed by legislative impacts on technology use, the necessity of including student voices in policy-making, and the implications of AI as a co-pilot in learning. The discussion underscores the need for curiosity and innovation in educational practices to prepare students for a technology-driven future.

Key Takeaways

• Integrating technology in classrooms requires understanding both instructional and information systems
• Safety and privacy in education technology are paramount for student protection
• Diverse voices in policy-making lead to more inclusive and effective educational practices
• Future Ready Schools aim to provide equitable resources for all students, regardless of background
• AI governance is essential for responsible implementation in educational settings
• Collaboration among educators and stakeholders enhances the effectiveness of technology integration
• Professional development should focus on equipping teachers with the right tools and knowledge
• Community engagement is crucial for understanding the needs of students and families
• The educational landscape is evolving, and districts must adapt to new technologies and methodologies but blocking all AI tools in schools is impractical however guidelines for wearable AI in schools are needed
• Student voices are crucial in policy discussions.
• Parting Tool: Socrat Ai an Ai tool built for teaching and leanring 

Resources Mentioned:

• Future Ready Schools aim to provide equitable resources for all students, regardless of background
• UnDisrupted Podcast hosted by Dr. Adam Phyall
• Plaud.Ai professional Ai note taker on you pin to your shirt  
• Socrat Ai an Ai tool built for teaching and leanring 

Chapter
02:59 Dr. Phyall's Journey into EdTech
06:00 Navigating Technology and Safety in Education
09:03 The Importance of Diverse Voices in Education
12:07 Transitioning to National Level Advocacy
14:58 Future Ready Schools and Cybersecurity
17:52 AI in Education: Governance and Implementation
21:02 Resources for Schools and Community Engagement
28:49 Navigating the AI Landscape in Education
31:35 The Challenges of AI Integration in Schools
34:14 Legislative Impacts on Technology Use
38:11 The Role of Student Voices in Policy Making
41:45 Understanding AI: Definitions and Implications
45:53 Embracing AI as a Co-Pilot in Learning
51:15 Curiosity and Innovation in Education

Welcome to episode 15 of the Zero Breach Zone podcast, where hosts Phil Hintz and Andy Lombardo discuss their experiences at recent conferences, focusing on cybersecurity strategies in K-12 education. They explore the importance of multi-factor authentication (MFA), the challenges of session timeouts, and the need for continuous improvement in cybersecurity practices. The conversation also highlights the significance of tabletop exercises for incident response and the convergence of physical and cybersecurity measures in schools. The hosts share insights on integrating technology for safety and the necessity of collaboration among various stakeholders. In this conversation, Andy Lombardo and Phil Hintz discuss various aspects of school security, including the importance of enhancing physical security measures, leveraging CISA for audits, and the role of AI in education. They emphasize the need for collaboration and networking within the EdTech community, as well as advocating for increased cybersecurity funding to protect K-12 institutions. The discussion ends with highlighting the significance of engaging with Congress to address these pressing issues and the helpful resources prepared by CoSN to do so.

Key Takeaways:

• MFA is essential but requires ongoing adjustments & MFA should extend to social media accounts
• Session timeouts can pose risks if not managed properly
• Tabletop exercises help prepare for incidents
• Convergence of physical and cyber security is crucial
• Stakeholder collaboration is key in incident response
• Continuous learning from conferences is invaluable
• K-12 cybersecurity threats are rising and we need your voice
• Cybersecurity is a bipartisan issue with real-world consequences
• Parting Tool: Help your district to become a Zero Breach Zone -Urge Congress to Protect and Invest in Cybersecurity Support for Schools-  through the CoSN prepared resources:https://cosn.quorum.us/campaign/115693/ 

Resources Mentioned 

• Evil Jinx: https://github.com/kgretzky/evilginx2

Chapters

00:00 Spring Reflections and Conference Recap

03:08 Cybersecurity Strategies and MFA Insights

06:01 Real-World Cybersecurity Challenges

09:06 Tabletop Exercises and Incident Response

12:00 Convergence of Physical and Cybersecurity

14:57 Integrating Technology for Safety

19:12 Enhancing School Security Measures

20:50 Leveraging CISA for Security Audits

22:34 Insights from K-12 Conferences

23:32 AI in Education: Opportunities and Challenges

26:33 Networking and Collaboration in EdTech

31:46 Advocating for Cybersecurity Funding

39:21 Call to Action: Engage with Congress

Welcome to Episode 6 of the Zero Breach Zone! In this episode, hosts Phil Hintz and Andy Lombardo welcome Jason Yaw Osei, Tech Director of Technology and Cybersecurity at Campbell ISD in Texas, for a fun and engaging discussion about cybersecurity in education and innovative training approaches.

Yaw's infectious energy and passion for all things tech shine through in this episode packed with laughs, tech talk, and cybersecurity insights. From geeking out about AI innovations to trading cybersecurity war stories, the conversation flows effortlessly between serious security discussions and playful tech banter. Whether you're a cybersecurity pro or just love hearing passionate people talk tech, this episode delivers entertainment and education in equal measure. 

Key Takeaways

• Breaking Down Innovation Barriers: Yaw discusses his thoughtful approach to introducing new security practices in communities that often view change with skepticism, showing how building trust and understanding can transform resistance into enthusiasm
• Digital Identity as Personal Security: Yaw breaks down complex cybersecurity concepts using brilliant home security analogies - from treating passwords like house keys to viewing data breaches like leaving your front door wide open. His memorable comparisons help make digital security feel as natural and necessary as locking your doors at night
• Innovative Training Through CyberNut: Discussion of how gamification is revolutionizing cybersecurity training, making it more engaging and effective for educational staff in his district
• Future of EdTech Security: Analysis of emerging trends in educational cybersecurity, including the integration of AI and automation in school settings.
• CyberNut - the security awareness training platform built exclusively for schools 
• Parting Tool: AboutMy.email: lets you send us a questionable email and we'll analyze it and tell you about its authentication, size, structure and how well it complies with best practices set by Yahoo & Google 

Welcome to episode 14 of the Zero Breach Zone, in this episode hosts Phil Hintz and Andy Lombardo dive into the current state of K-12 cybersecurity, analyzing key findings from the Cisco Talos 2024 report. They explore the concerning rise in ransomware attacks targeting educational institutions, the struggles schools face with limited security budgets, and practical strategies for strengthening cyber defenses. The conversation covers the critical importance of regular system monitoring, vulnerability patching, and addressing MFA weaknesses that leave schools exposed. Phil and Andy emphasize that human factors remain one of the biggest security challenges, highlighting how effective security awareness training can significantly reduce risk when implemented thoughtfully. The discussion also examines the growing relevance of zero trust architecture and how phishing attacks continue to be cybercriminals' preferred entry point to school systems. Throughout the episode, they stress that despite being perceived as low-value targets, K-12 schools are increasingly in cybercriminals' crosshairs, making collaboration among education cybersecurity professionals more important than ever.

Key Takeaways:

• K-12 education is increasingly targeted by cybercriminals despite being perceived as low-value
• Educational institutions now lead in ransomware attacks, with incidents peaking during school breaks
• Budget constraints severely limit cybersecurity initiatives in schools
• Fundamental security practices are critical: regular monitoring, patching systems, and addressing MFA vulnerabilities
• Security awareness training delivers strong ROI when implemented effectively
• Email security and phishing prevention remain essential first-line defenses
• Creating a culture of cyber awareness among all staff is fundamental to protection
• Zero trust architecture and data-driven security decisions are becoming increasingly important
• Collaboration among education cybersecurity professionals is vital for improving collective defense
• Proactive measures and basic cyber hygiene significantly reduce exposure to attacks

Resources Mentioned:
- Cisco Talos 2024 Cybersecurity Report
- CyberNut Security Awareness Training for K-12
- cosn.quorum.us/campaign/115693/
- Parting Tool: Rust Desk as a fee alternative to TeamViewer on Andy's Blog EdTechIrl  (@edtechirl on substack)

Chapters

00:00 Introduction to K-12 Cybersecurity

02:49 Insights from Cisco Talos 2024 Report

06:04 Understanding the Target: K-12 Education

08:56 Challenges in Cybersecurity Funding

11:57 The Importance of Regular Monitoring and Patching

15:02 Security Awareness and Human Factors in Cybersecurity

20:19 Navigating Email Security Challenges

23:22 Building a Culture of Cyber Awareness

25:14 Understanding Spoofing and Phishing Attacks

27:31 Ransomware Trends and Threats

30:12 The Rise of Ransomware as a Service

39:56 Proactive Measures Against Ransomware

43:35 Remote Access Solutions for Security

Welcome to Episode 4 of the Zero Breach Zone! In this episode, we sit down with Oliver Page, CEO and founder of CyberNut, for an inspiring conversation about entrepreneurship and cybersecurity in education. Oliver shares his journey as a serial entrepreneur, including his experience founding NutKase, a successful K-12 device case manufacturer that protected over 3 million student devices. Through both success and failure, he shares valuable lessons that led him to his current venture. As the founder of CyberNut, he discusses how his company is revolutionizing cybersecurity training in educational institutions with innovative, user-friendly solutions.

Oliver explores the critical need for comprehensive cybersecurity education and how CyberNut is meeting this challenge through fast, efficient training programs and authentic phishing simulations. The discussion highlights how their unique approach caters to both faculty/staff and student needs, setting them apart in the educational cybersecurity space.

Welcome to episode 13 of the Zero Breach Zone! In this episode hosts Phil Hintz and Andy Lombardo speak with Jeff McCoy, Associate Superintendent for Academics in Greenville County, South Carolina. Drawing from his 25+ years in education, Jeff discusses the integration of technology in schools, emphasizing the distinction between vendors and solution partners. The conversation highlights cybersecurity as a shared responsibility across all departments, not just technology. Jeff stresses that security training should be continuous rather than annual, using short, clear communications. The discussion covers how data breaches often involve academic software, the importance of evaluating vendors' security practices, and the need for transparency with AI implementation in education. Jeff emphasizes that technology should ultimately enhance teaching and learning, requiring proper change management and cross-departmental collaboration. As this weeks Parting Tool, Jeff highlights the crucial role of 1EdTech, a global non-profit that develops open standards to reduce complexity, accelerate innovation, and expand educational possibilities worldwide.

Key Takeaways:
- Cybersecurity is a shared responsibility across all departments, not just technology
- Distinguish between vendors (who sell products) and solution partners (who address needs)
- Cybersecurity training should be continuous, using short, clear communications
- Data breaches frequently involve academic software, not just administrative systems
- Multi-factor authentication is essential for protecting school systems
- Vendors must be evaluated for their cybersecurity practices and certifications
- AI in education requires transparency about data usage and privacy
- Technology should enhance teaching and learning, not complicate it
- 1EdTech provides valuable resources for vetting educational apps

Resources Mentioned:
- Multi-factor authentication solutions
- Greenville County Schools' cybersecurity protocols
- Educational technology evaluation frameworks
- Parting Tool: 1EdTech for vetting educational applications

Welcome to episode 12 of the Zero Breach Zone! Join hosts Phil Hintz and Andy Lombardo as they sit down with Michelle Krieger to explore topics top of mind at the intersection of education and cybersecurity recorded at FETC. In this energetic conversation, Michelle shares her unique journey from Special Education Teacher to Education Innovation to Data Protection Officer, to Director of Technology. Michelle offers valuable insights on the importance of data protection in increasingly digital learning environments. The discussion delves into crucial aspects of differentiating between Director of Technology and data protection officer roles. Everyone emphasizes the importance of "secure by design" principles, sharing examples of how schools can implement data privacy practices from the ground up rather than as afterthoughts. Drawing from her classroom experience, Michelle shares stories about working with students of all ages on online safety, from using a baking metaphor with elementary school kids to discussing deep fakes with high schoolers. Michelle's practical approach to making security concepts accessible to both educators and students resonated throughout the conversation, particularly when discussing the balance between technological innovation and responsible data stewardship. This episode is a must listen to all interested in edtech and cybersecurity!

Key Takeaways

• The critical importance of data protection and cybersecurity in educational settings 
• Challenges of implementing technology in schools while maintaining privacy 
• Necessity of tailored cybersecurity training for educational staff and all school employees (from teachers to bus drivers)
• Proactive approaches to protecting student data and retention evaluation
• Strategies for engaging students in cybersecurity education from elementary to high school
• Building effective collaboration between educators and technology providers 
• The evolving landscape of data privacy practices in education

Resources Mentioned: 

• Secure by Design & SIS
• Data Guard by ClassLink 
• Antoinette King's book, The Digital Citizen's Guide to Cybersecurity
• The Cybersecurity Rubric
• Parting Tool: Explaining to your Superintendent or School Board the difference between the role of Director of Technology & Data Protection Officer 

Welcome to episode 11 of the Zero Breach Zone! Join us for an enlightening conversation with  Scott Bailey, former superintendent and educational innovator from Desert Sands School District. Through his engaging storytelling, Bailey shares candid experiences from his work across Nevada's largest school districts, including Clark County School District with 314,000 students and Washoe County School District serving the Reno-Tahoe area. His firsthand account of managing the initial COVID-19 outbreak and spearheading the rapid transition to online learning provides valuable insights into crisis management at scale. Drawing from his extensive background in education leadership, Bailey addresses the evolving landscape of digital security in schools with a refreshing mix of wisdom and practical experience. His approach to balancing technological advancement with student safety, coupled with his deep understanding of crisis response planning, demonstrates why he's become a respected voice in educational cybersecurity. Through real-world examples and lessons learned, his emphasis on the crucial partnership between educational leaders and technology officers provides a blueprint for creating secure, innovative learning environments.

Key Takeaways

• The fundamental importance of student connectivity for educational equity
• Essential elements of cybersecurity implementation in educational settings
• Building effective crisis response strategies through proactive planning
• Developing comprehensive security frameworks that address both physical and cyber threats
• The critical role of relationship-building in addressing cybersecurity challenges
• Implementing effective tabletop exercises for cybersecurity scenarios
• Strategic approaches to protecting student data privacy
• Creating sustainable innovative practices while maintaining security
• The importance of holistic safety planning in educational environments
• Methods for assessing and improving institutional cybersecurity posture
• Strategies for effective communication during security incidents
• Balancing technological advancement with security requirements

Resources Mentioned

Educational Institution Crisis Response Framework
Student Data Privacy Compliance Resources
Digital Equity Implementation Toolkit
Cybersecurity Assessment Guidelines for Schools
Parting Tool: TriVigil Security Assessment Platform for Education

#EdTech #Cybersecurity #EducationalLeadership #SchoolSafety #DigitalEquity #StudentPrivacy #CrisisResponse #SecurityPlanning